Fix HMAC-SHA-256 computation.

This was completely wrong.

configuration.c

@@ -1221,11 +1221,22 @@ parse_config_line(int c, gnc_t gnc, void *closure,
         }
         switch(key->type) {
         case AUTH_TYPE_SHA256:
-            if(key->len != 32) {
+            if(key->len > 64) {
                 free(key->value);
                 free(key);
                 goto fail;
             }
+            if(key->len < 64) {
+                unsigned char *v = realloc(key->value, 64);
+                if(v == NULL) {
+                    free(key->value);
+                    free(key);
+                    goto fail;
+                }
+                memset(v + key->len, 0, 64 - key->len);
+                key->value = v;
+                key->len = 64;
+            }
             break;
         case AUTH_TYPE_BLAKE2S:
             if(key->len != 16) {

hmac.c

@@ -120,12 +120,10 @@ compute_hmac(const unsigned char *src, const unsigned char *dst,
     case AUTH_TYPE_SHA256: {
         SHA256Context inner, outer;
         unsigned char ipad[64], ihash[32], opad[64];
-        if(key->len != 32)
+        if(key->len != 64)
             return -1;
-        for(int i = 0; i < 32; i++)
+        for(int i = 0; i < 64; i++)
             ipad[i] = key->value[i] ^ 0x36;
-        for(int i = 32; i < 64; i++)
-            ipad[i] = 0x36;
         rc = SHA256Reset(&inner);
         if(rc < 0)
             return -1;
@@ -156,10 +154,8 @@ compute_hmac(const unsigned char *src, const unsigned char *dst,
         if(rc != 0)
             return -1;
 
-        for(int i = 0; i < 32; i++)
-            opad[i] = ihash[i] ^ 0x5c;
-        for(int i = 32; i < 64; i++)
-            opad[i] = 0x5c;
+        for(int i = 0; i < 64; i++)
+            opad[i] = key->value[i] ^ 0x5c;
 
         rc = SHA256Reset(&outer);
         if(rc != 0)